Update dependency pnpm to v11.20.0 [SECURITY] (#34250)

Co-authored-by: Michael Telatynski <7t3chguy@gmail.com>

.github/workflows/build_desktop_test.yaml

@@ -81,7 +81,7 @@ jobs:
               shell: bash
               env:
                   # We need sudo on Linux as it is installed in /opt/
-                  RUN_AS: ${{ runner.os == 'Linux' && 'sudo' || '' }}
+                  RUN_AS: ${{ runner.os == 'Linux' && 'sudo -E' || '' }}
                   PNPM_PATH: ${{ steps.pnpm.outputs.bin_dest }}
                   EXECUTABLE: ${{ steps.executable.outputs.path }}
 

package.json

@@ -62,7 +62,7 @@
     "devEngines": {
         "packageManager": {
             "name": "pnpm",
-            "version": "11.5.2",
+            "version": "11.20.0",
             "onFail": "download"
         }
     },

pnpm-workspace.yaml

@@ -57,10 +57,17 @@ packageExtensions:
         peerDependencies:
             # Silence warning
             vite: "^8.0.0"
+    "@vitest/mocker":
+        peerDependencies:
+            vite: "^8.0.0"
+    vitest:
+        peerDependencies:
+            vite: "^8.0.0"
 
 allowBuilds:
     # Needed to make the git dependency in layered.sh happy
     matrix-js-sdk: true
+    "matrix-js-sdk@git+https://github.com/matrix-org/matrix-js-sdk.git": true
     # Installs the CLI, which we do not need
     "@sentry/cli": false
     # Installs nx cloud client, which we do not need
@@ -152,8 +159,8 @@ overrides:
     # https://github.com/advisories/GHSA-fx2h-pf6j-xcff
     # https://github.com/advisories/GHSA-4w7w-66w2-5vf9
     # https://github.com/advisories/GHSA-v6wh-96g9-6wx3
-    vite@5: ^6.4.3
-    vite@6 <6.4.3: ^6.4.3
+    # vitepress is the only consumer of vite <8; pin it to a patched vite 6 (it does not support vite 8).
+    vitepress>vite: ^6.4.3
     # Workaround for https://github.com/electron/electron/issues/51619
     yauzl: "^3.3.1"
     # Convince api-extractor to use a newer Typescript version